CVE-2022-4048

—

CVSS 3.1

7.7 high

EPSS

<1%p0

Published

May 15, 2023 (May 15, 2023)

Modified

Jun 17, 2026

Description

Inadequate Encryption Strength in CODESYS Development System V3 versions prior to V3.5.18.40 allows an unauthenticated local attacker to access and manipulate code of the encrypted boot application.

Vendors: codesys
Products: development system v3
Weakness: CWE-326
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news3 stories

Vulnerabilities found affecting OT products from German companies Festo and CODESYS

The RecordJan 9, 00:00 UTC · Jan 9, 2023Vulnerability CVE-2022-3079 CVE-2022-3270 CVE-2022-4048+2 CVEs

3 New Vulnerabilities Affect OT Products from German Companies Festo and CODESYS

The Hacker NewsNov 30, 09:41 UTC · Nov 30, 2022Vulnerability CVE-2022-3270 CVE-2022-3079 CVE-2022-4048+2 CVEs

New

Infosecurity MagazineNov 30, 09:30 UTC · Nov 30, 2022Vulnerability CVE-2022-4048 CVE-2022-3079 CVE-2022-3270